This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/G33itK1qq3WeYfI2JZv_Df-F-kM.roa File: G33itK1qq3WeYfI2JZv_Df-F-kM.roa (raw, json) Hash identifier: M48oQ7e0L/CLHTbH2STVHWlHyf+bv796hviSQB+beow= Subject key identifier: 1B:7D:E2:B4:AD:6A:AB:75:9E:61:F2:36:25:9B:FF:0D:FF:85:FA:43 Certificate issuer: /CN=099da06b80fa749068028b597be3e50e8b118786 Certificate serial: 019B7EA6B966B6F2987A1509BDB8636ECA22 Authority key identifier: 09:9D:A0:6B:80:FA:74:90:68:02:8B:59:7B:E3:E5:0E:8B:11:87:86 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CZ2ga4D6dJBoAotZe-PlDosRh4Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/G33itK1qq3WeYfI2JZv_Df-F-kM.roa Signing time: Fri 02 Jan 2026 12:20:14 +0000 ROA not before: Fri 02 Jan 2026 12:20:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42034 IP address blocks: 185.135.32.0/22 maxlen: 22 193.108.181.0/24 maxlen: 24 2001:67c:274c::/48 maxlen: 48 2a06:f140::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/CZ2ga4D6dJBoAotZe-PlDosRh4Y.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/CZ2ga4D6dJBoAotZe-PlDosRh4Y.mft rsync://rpki.ripe.net/repository/DEFAULT/CZ2ga4D6dJBoAotZe-PlDosRh4Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 18:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:b9:66:b6:f2:98:7a:15:09:bd:b8:63:6e:ca:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=099da06b80fa749068028b597be3e50e8b118786 Validity Not Before: Jan 2 12:20:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1b7de2b4ad6aab759e61f236259bff0dff85fa43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:a5:61:74:e4:28:d5:e8:b3:3e:82:88:b0:7c: b2:fa:f3:5c:c5:ca:6c:d7:ba:9b:ae:05:91:08:2e: f4:10:b5:93:25:04:5e:c2:2e:7f:f9:7d:d4:0e:73: 4d:b2:f0:7e:96:e2:ae:0a:96:2f:ae:b5:6e:2d:d6: c0:2f:b0:04:11:f5:37:31:8d:c4:5a:64:60:dc:c6: 75:9f:ac:92:8c:df:3f:0e:cb:06:bd:1f:71:9e:a4: 99:63:98:83:46:05:32:59:b0:b5:e7:1d:a9:1c:d3: 37:89:e1:30:e0:dd:59:07:b1:96:03:d8:6a:60:5d: 6c:27:06:50:cd:10:aa:87:19:d5:1b:c8:a6:e5:7a: 9f:7a:7f:11:55:10:45:a9:77:a9:31:43:0c:d7:9f: 7d:18:32:52:c4:e5:e2:ef:6c:e8:75:f3:c1:e3:e7: ed:85:91:1f:eb:be:f8:8a:51:cd:f8:e8:cf:73:df: bc:78:7d:dd:23:2e:f8:9c:76:ad:33:f5:42:bd:9f: 7a:0d:81:ee:f9:01:e1:e2:f7:f3:6f:7a:93:8b:5a: fd:78:59:28:0b:f7:ab:d3:65:7c:28:44:03:27:86: 70:9a:5f:db:f1:7d:b6:36:fc:1b:6b:69:37:67:63: f7:22:46:f1:65:21:9a:4a:4a:14:26:19:b9:4d:5f: c7:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:7D:E2:B4:AD:6A:AB:75:9E:61:F2:36:25:9B:FF:0D:FF:85:FA:43 X509v3 Authority Key Identifier: keyid:09:9D:A0:6B:80:FA:74:90:68:02:8B:59:7B:E3:E5:0E:8B:11:87:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CZ2ga4D6dJBoAotZe-PlDosRh4Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/G33itK1qq3WeYfI2JZv_Df-F-kM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/CZ2ga4D6dJBoAotZe-PlDosRh4Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.135.32.0/22 193.108.181.0/24 IPv6: 2001:67c:274c::/48 2a06:f140::/29 Signature Algorithm: sha256WithRSAEncryption ad:a7:13:9b:05:dd:12:b8:5d:2e:10:e7:04:0a:13:ad:22:f7: 69:54:aa:7c:de:2b:4d:08:aa:21:4a:f5:96:68:4c:7e:f9:ae: 50:4b:52:05:9e:33:ba:2c:19:e6:50:59:7c:98:91:22:f4:39: 86:2f:0f:42:13:90:ee:87:67:0f:d4:07:9e:a2:01:1d:2f:19: ed:ab:36:00:f8:59:0a:59:d7:97:a8:14:79:ae:0c:ed:db:bd: 64:a1:1c:db:36:c2:b2:df:67:16:f4:ca:e1:7c:70:02:9a:f8: 5e:e9:e3:c0:42:b0:c0:cd:9a:ce:6c:d4:2a:01:96:ac:db:bd: ad:00:3b:1d:01:97:ff:c3:a1:14:70:66:be:b4:2c:bb:4c:43: be:89:ee:37:ea:b0:71:1d:21:bc:59:f0:5f:9d:d4:00:36:8e: f9:0d:2f:9b:e8:ba:52:67:b4:77:f5:06:b7:08:cb:36:d5:1a: fc:f2:9b:9c:bb:ab:bd:7b:8c:f1:7a:ed:90:9d:dd:94:5f:9b: 91:63:d2:21:0c:21:42:89:81:c3:69:49:f5:1d:0e:be:57:50: 23:9c:09:bd:29:58:b7:2d:86:79:bf:c9:25:c7:b4:38:0e:d1: 33:af:14:8d:b0:73:fd:cf:7c:c1:de:f1:88:af:5a:84:e7:74: 4b:51:87:d3 -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZt+prlmtvKYehUJvbhjbsoiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5OWRhMDZiODBmYTc0OTA2ODAyOGI1OTdiZTNlNTBlOGIx MTg3ODYwHhcNMjYwMTAyMTIyMDE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYjdkZTJiNGFkNmFhYjc1OWU2MWYyMzYyNTliZmYwZGZmODVmYTQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmqVhdOQo1eizPoKIsHyy+vNcxcps 17qbrgWRCC70ELWTJQRewi5/+X3UDnNNsvB+luKuCpYvrrVuLdbAL7AEEfU3MY3E WmRg3MZ1n6ySjN8/DssGvR9xnqSZY5iDRgUyWbC15x2pHNM3ieEw4N1ZB7GWA9hq YF1sJwZQzRCqhxnVG8im5Xqfen8RVRBFqXepMUMM1599GDJSxOXi72zodfPB4+ft hZEf6774ilHN+OjPc9+8eH3dIy74nHatM/VCvZ96DYHu+QHh4vfzb3qTi1r9eFko C/er02V8KEQDJ4Zwml/b8X22Nvwba2k3Z2P3IkbxZSGaSkoUJhm5TV/HpQIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFBt94rStaqt1nmHyNiWb/w3/hfpDMB8GA1UdIwQY MBaAFAmdoGuA+nSQaAKLWXvj5Q6LEYeGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1oyZ2E0RDZkSkJvQW90WmUtUGxEb3NSaDRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9iNDA0YzctYmQzZC00NzUyLThhZGUt MzFmY2M0NTU1NzVlLzEvRzMzaXRLMXFxM1dlWWZJMkpadl9EZi1GLWtNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS9iNDA0YzctYmQzZC00NzUyLThhZGUtMzFmY2M0NTU1NzVl LzEvQ1oyZ2E0RDZkSkJvQW90WmUtUGxEb3NSaDRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDASBAIAATAMAwQCuYcgAwQA wWy1MBYEAgACMBADBwAgAQZ8J0wDBQMqBvFAMA0GCSqGSIb3DQEBCwUAA4IBAQCt pxObBd0SuF0uEOcEChOtIvdpVKp83itNCKohSvWWaEx++a5QS1IFnjO6LBnmUFl8 mJEi9DmGLw9CE5Duh2cP1AeeogEdLxntqzYA+FkKWdeXqBR5rgzt271koRzbNsKy 32cW9MrhfHACmvhe6ePAQrDAzZrObNQqAZas272tADsdAZf/w6EUcGa+tCy7TEO+ ie436rBxHSG8WfBfndQANo75DS+b6LpSZ7R39Qa3CMs21Rr88pucu6u9e4zxeu2Q nd2UX5uRY9IhDCFCiYHDaUn1HQ6+V1AjnAm9KVi3LYZ5v8klx7Q4DtEzrxSNsHP9 z3zB3vGIr1qE53RLUYfT -----END CERTIFICATE-----Generated at Mon Jan 26 03:27:59 2026 by rpki-client